互联网中基于流测量的P2P流量及异常事件检测

《互联网中基于流测量的P2P流量及异常事件检测》由会员上传分享，免费在线阅读，更多相关内容在学术论文-天天文库。

1、北京邮电大学博士学位论文互联网中基于流测量的P2P流量及异常事件检测姓名：韦安明申请学位级别：博士专业：计算机应用技术指导教师：程时端20070501北京邮电大学博士论文互联网中基于流测量的P2P流量及异常事件检测节点)，然后以种子节点为起点，根据P2P节点间具有的流量关联特性对未抽样分组进行检测，从而发现其他的P2P节点，另外，从保护测量系统有限资源出发，通过节点替换保证超级节点检测过程中P2P列表的内存消耗。采用互联网数据进行的实验结果表明，IPS可以有效检出P2P超级节点。(4)网络中经常出现闪聚事件(FlashCrowdEvents，简称FEE)和仿闪聚事件

2、的拒绝服务攻击(DistributeddenialofserviceattackthatMimicFCE，简称DMF)，致使网络流量出现异常增大，并降低了Web服务性能。本文根据不同异常流量的源地址分布存在聚类特性差异的特点，提出用信息熵方法检测网络异常事件类型。采用互联网Web站点访问记录及其仿真数据进行的实验结果表明，该方法可以正确检测出FCE及DMF异常。【关键词】口网，互联网，网络测量，流量测量，分组抽样，流抽样，P2P，流量检测，流量控制ⅡAbstractRecently,withthepopularityofIntemet,networkmeasurem

3、enthasbeenabasisfornetworkoperationandmanagement．Moreover,trafficmeasurementisoneofthemostimportantpartsinthenetworkmeasurement．However,mostoftheexistingtrafficmeasurementsystemsnowadayscannotsatisfythepresentandfuturerequirementsonhighspeedlinkmeasurementandnewserviceidentification．Th

4、isthesisaimstoimprovetheperformanceofmeasurementmethodsandsystems．ItfocusesonSomekeytechnologiesincludingtrafficsampling,P2Ptrafficidentificationandcontrol，P2Psuper-nodeinferring,andabnormalnetworkeventsdetection．Themaincontributionsofthethesisareasfoilows：(1)Flowsamplingtechnologyiswi

5、delyusedtomitigatetheworkloadofthenetworkmeasurementsystem．Duringtheflowsampling,toreducethelossofelephantflowswillensuremoreinformationcontainedinthesamplesandthereforeincreasetheaccuracyofthemeasurement．．InordertOovercomethedeficiencyofthepreviousalgorithmhardflow，thisthesispresentst

6、woimprovedalgorithmscalledaflowlandaflow2whichreducethelossofelephantflows．Comparedtothehardflow，theresultofexperimentusingInteracttracesshowsthatthelossofelephantflowsofimprovedalgorithmsislessthanaflowlandaflow2whenthesamplerateisthesame．(动ItisanimportanttomitigatecongestionoftheInte

7、met．However,forameasurementsystem，identifyingandcontrollingP2PtrafficonlIneisabigchallenge．ThisthesispresentsanovelmethodwhichcombinessignaturematchingwithrandompacketdiscardingtoidentifyandcontroltheP2Ptraffic．Ontheonehand，matchingtheP2PsignatureswithTernaryContentAddressableMemoWfr